password -> token
add multiplication